316fac5ae2d4e250b1c0f10b4388fa2c6c3407b118e539a7d865613e373628d9 | Triage

Analysis

max time kernel
292s
max time network
241s
platform
macos-10.15_amd64
resource
macos-20241101-en
resource tags

arch:amd64arch:i386image:macos-20241101-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
02/02/2025, 19:22

Sharing

Report Analysis Logs

General

Target

LenovoSafeWidget115.apk
Size

123KB
MD5

12c89f415f86784edddeb18072f5113f
SHA1

135c18ae3ca1878895391abe5bd69f858b73fb8c
SHA256

6972ef902f648ec405adec1a8ac2843048fe269e0570cfa71379545d9b0fbe77
SHA512

8c4e31290a966db551ae53ca720247779929f2e6ab93166bdd11ba46d6872d328e2670ce2ebd56f95bcbe225f821a4c07856aed9f5ccf677b2876bec1c3cbff0
SSDEEP

3072:znyleVG+yjnp0qWhjKJE0hil5uBl1n8HFZAhCWij:IeM+y7iXWJEyvIz

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/LenovoSafeWidget115.apk\""
1⤵
PID:471

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/LenovoSafeWidget115.apk\""
1⤵
PID:471

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/LenovoSafeWidget115.apk
1⤵
PID:471
- /bin/zsh
  /bin/zsh -c /Users/run/LenovoSafeWidget115.apk
  2⤵
  PID:472
- /Users/run/LenovoSafeWidget115.apk
  /Users/run/LenovoSafeWidget115.apk
  2⤵
  PID:472

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:479

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:479

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/var/db/nsurlstoraged/dafsaData.bin

Filesize
54KB

MD5
64f469698e53d0c828b7f90acd306082

SHA1
bcc041b3849e1b0b4104ffeb46002207eeac54f3

SHA256
d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd

SHA512
a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f

Download Submit